http://bugs.winehq.org/show_bug.cgi?id=28628
Bug #: 28628
Summary: advapi32/security.ok: GetTokenInformation(Token,
TokenGroups,...) returns partial garbage leading to
uninitialized memory accesses?
Product: Wine
Version: 1.3.29
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: advapi32
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: dank(a)kegel.com
Classification: Unclassified
"wine advapi32_test.exe.so security.c" says in part
security.c:1475: TokenGroups:
security.c:1489: S-1-1-0, \Everyone use: 5 attr: 0x00000007
security.c:1489: S-1-2-0, \LOCAL use: 5 attr: 0x00000007
security.c:1489: S-1-5-4, NT AUTHORITY\INTERACTIVE use: 5 attr: 0x00000007
security.c:1489: S-1-5-11, NT AUTHORITY\Authenticated Users use: 5 attr:
0x00000007
security.c:1489: S-1-5-32-544, BUILTIN\Administrators use: 4 attr: 0x0000000f
security.c:1492: attr: 0x00000007 LookupAccountSid failed with error 1332
security.c:1492: attr: 0xc0000007 LookupAccountSid failed with error 1332
Those two LookupAccountSid() errors appear to be because the last two SIDs
from GetTokenInformation() are garbage.
This causes the valgrind warning
Conditional jump or move depends on uninitialised value(s)
at RtlEqualSid (sec.c:210)
by EqualSid (security.c:1027)
by IsWellKnownSid (security.c:961)
by LookupAccountSidW (security.c:2098)
by LookupAccountSidA (security.c:2024)
by test_token_attr (security.c:1485)
by func_security (security.c:4000)
by run_test (test.h:556)
by main (test.h:624)
Uninitialised value was created by a client request
at RtlAllocateHeap (heap.c:208)
by test_token_attr (security.c:1468)
by func_security (security.c:4000)
by run_test (test.h:556)
by main (test.h:624)
I dumped the SIDs that are being compared in test_token_attr, and
it looks like the first six are ok, but the last two aren't:
...
security.c:1487: Dumping SIDs
security.c:1489: i = 4, j = 0, val = 1
security.c:1489: i = 4, j = 1, val = 2
security.c:1489: i = 4, j = 2, val = 0
security.c:1489: i = 4, j = 3, val = 0
security.c:1489: i = 4, j = 4, val = 0
security.c:1489: i = 4, j = 5, val = 0
security.c:1489: i = 4, j = 6, val = 0
security.c:1489: i = 4, j = 7, val = 5
security.c:1489: i = 4, j = 8, val = 20
security.c:1489: i = 4, j = 9, val = 0
security.c:1489: i = 4, j = 10, val = 0
security.c:1489: i = 4, j = 11, val = 0
security.c:1496: S-1-5-32-544, BUILTIN\Administrators use: 4 attr: 0x0000000f
security.c:1487: Dumping SIDs
security.c:1489: i = 5, j = 0, val = 1
security.c:1489: i = 5, j = 1, val = 2
security.c:1489: i = 5, j = 2, val = 0
security.c:1489: i = 5, j = 3, val = 0
security.c:1489: i = 5, j = 4, val = cc
security.c:1489: i = 5, j = 5, val = cc
security.c:1489: i = 5, j = 6, val = cc
security.c:1489: i = 5, j = 7, val = cc
security.c:1489: i = 5, j = 8, val = cc
security.c:1489: i = 5, j = 9, val = cc
security.c:1489: i = 5, j = 10, val = cc
security.c:1489: i = 5, j = 11, val = cc
security.c:1499: attr: 0x00000007 LookupAccountSid failed with error 1332
security.c:1487: Dumping SIDs
security.c:1489: i = 6, j = 0, val = cc
security.c:1489: i = 6, j = 1, val = cc
security.c:1489: i = 6, j = 2, val = cc
security.c:1489: i = 6, j = 3, val = cc
security.c:1489: i = 6, j = 4, val = cc
security.c:1489: i = 6, j = 5, val = cc
security.c:1489: i = 6, j = 6, val = cc
security.c:1489: i = 6, j = 7, val = cc
security.c:1489: i = 6, j = 8, val = cc
security.c:1489: i = 6, j = 9, val = cc
security.c:1489: i = 6, j = 10, val = cc
security.c:1489: i = 6, j = 11, val = cc
security.c:1499: attr: 0xc0000007 LookupAccountSid failed with error 1332
Is some buffer length wrong somewhere?
The responsible code seems to be from:
commit 573db9ef639f65385f1efab5593b52c72b4b4108
Author: Nikolay Sivov <nsivov(a)codeweavers.com>
Date: Tue Aug 23 11:16:27 2011 +0400
ntdll: While requesting TokenGroups calculate required user buffer size in
server.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=28695
Bug #: 28695
Summary: Uninitialized variables in create_rebar
Product: Wine
Version: 1.3.30
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: ieframe
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: dank(a)kegel.com
Classification: Unclassified
Valgrind complains:
Conditional jump or move depends on uninitialised value(s)
at REBAR_CommonSetupBand (rebar.c:1772)
by REBAR_WindowProc (rebar.c:2549)
by ??? (in dlls/user32/user32.dll.so)
by call_window_proc (winproc.c:242)
by WINPROC_call_window (winproc.c:899)
by call_window_proc (message.c:2211)
by send_message (message.c:3084)
by SendMessageW (message.c:3264)
by create_rebar (iexplore.c:481)
by ie_window_proc (iexplore.c:506)
by ??? (in dlls/user32/user32.dll.so)
by call_window_proc (winproc.c:242)
by WINPROC_call_window (winproc.c:899)
by call_window_proc (message.c:2211)
by send_message (message.c:3084)
by SendMessageW (message.c:3264)
by WIN_CreateWindowEx (win.c:1446)
by CreateWindowExW (win.c:1582)
by create_ie (iexplore.c:694)
by InternetExplorer_Create (iexplore.c:811)
Uninitialised value was created by a stack allocation
at create_rebar (iexplore.c:434)
Conditional jump or move depends on uninitialised value(s)
at REBAR_ValidateBand (rebar.c:1630)
by REBAR_WindowProc (rebar.c:2565)
by ??? (in dlls/user32/user32.dll.so)
by call_window_proc (winproc.c:242)
by WINPROC_call_window (winproc.c:899)
by call_window_proc (message.c:2211)
by send_message (message.c:3084)
by SendMessageW (message.c:3264)
by create_rebar (iexplore.c:481)
by ie_window_proc (iexplore.c:506)
by ??? (in dlls/user32/user32.dll.so)
by call_window_proc (winproc.c:242)
by WINPROC_call_window (winproc.c:899)
by call_window_proc (message.c:2211)
by send_message (message.c:3084)
by SendMessageW (message.c:3264)
by WIN_CreateWindowEx (win.c:1446)
by CreateWindowExW (win.c:1582)
by create_ie (iexplore.c:694)
by InternetExplorer_Create (iexplore.c:811)
Uninitialised value was created by a stack allocation
at create_rebar (iexplore.c:434)
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=28767
Bug #: 28767
Summary: shell32: uninitialized memory used during
TRASH_EnumItems, triggered by "make recyclebin.ok"
Product: Wine
Version: 1.3.30
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: shell32
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: dank(a)kegel.com
Classification: Unclassified
Running "make recyclebin.ok" in shell32/tests, valgrind complains
Conditional jump or move depends on uninitialised value(s)
at __mktime_internal (mktime.c:428)
by mktime (mktime.c:518)
by TRASH_EnumItems (trash.c:444)
by SHQueryRecycleBinW (recyclebin.c:859)
by SHQueryRecycleBinA (recyclebin.c:848)
by test_query_recyclebin (recyclebin.c:74)
by func_recyclebin (recyclebin.c:106)
by run_test (test.h:556)
by main (test.h:624)
Uninitialised value was created by a stack allocation
at TRASH_EnumItems (trash.c:506)
Looks like not all the fields of del_time got initialized?
47b40c58 (Mikołaj Zalewski 2006-08-17 18:29:58 +0200 444) del_secs =
mktime(&del_time);
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=17105
Summary: Magic: The Gathering Online 3.0 fails to log in with
L0014
Product: Wine
Version: 1.1.13
Platform: HP
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: secur32
AssignedTo: kai.blin(a)gmail.com
ReportedBy: robfjohnson(a)gmail.com
Created an attachment (id=18941)
--> (http://bugs.winehq.org/attachment.cgi?id=18941)
Console Output
When running Magic Online Version 3 with Wine, when I try to log in I receive
L0014: The Magic Online Server is down for maintenance. If you continue to
receive this error, check your date and time settings.
Note that this is different than bug 14060, as 14060 gives you L0001: You have
lost your connection to the server. Bug 14060 is supposedly (and from what I
see actually) fixed as of git from 1-20-09. I encountered this bug when I
tested with git from 1-22-09, and continues into 1-23-09.
Having spoken to other Magic Online players, I found that L0014 has been caused
(on Windows machines) by firewall issues, and also by incorrectly set Date and
Time. I do not know any such issues on my computer that would cause this bug,
but I am not certain that the problem is not my computer.
It seems to me that the bug is in schan - which was the cause of but 14060.
14060 was schan being not implemented, whereas this bug, unless the problem is
with my computer, may be that schan is half-implemented. (See, in the Console
Output, the "Using hardcoded "NORMAL" priority" messages.) However, this
paragraph is just speculation in case it gives someone an idea.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=26639
Summary: Steam: crashes randomly while downloading L4D2
Product: Wine
Version: 1.3.16
Platform: x86-64
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: mewrei(a)mewrei.com
Created an attachment (id=33912)
--> (http://bugs.winehq.org/attachment.cgi?id=33912)
Backtrace file
While downloading/installing Left 4 Dead 2 via Steam, the app will randomly
crash in random intervals, sometimes on startup, othertimes several minutes
after launch. There are no user interactions that cause this.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18614
Summary: Problem with starting of wine or winecfg
Product: Wine
Version: 1.1.21
Platform: PC-x86-64
OS/Version: Linux
Status: UNCONFIRMED
Severity: critical
Priority: P1
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: kh-pol(a)yandex.ru
When I start winecfg (even when there is no .wine in my home directory) error
message emerges.
ktdr@jigsaw:~$ winecfg
wine: created the configuration directory '/home/ktdr/.wine'
Could not load Mozilla. HTML rendering will be disabled.
wine: Unhandled page fault on write access to 0xeee52e96 at address 0x7d87dc36
(thread 000b), starting debugger...
err:process:__wine_kernel_init boot event wait timed out
err:winecfg:open_mountmgr failed to open mount manager err 2
ktdr@jigsaw:~$
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=27413
Summary: Segmentation fault in Kudos 2 Demo
Product: Wine
Version: unspecified
Platform: x86
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: ktowns(a)live.com.au
Created an attachment (id=35059)
--> (http://bugs.winehq.org/attachment.cgi?id=35059)
Terminal output
Downloaded demo here: http://www.positech.co.uk/kudos2/Kudos2DemoInstaller.exe
On attempting to start a new game, the application exits. Terminal reads
'Segmentation fault.' Full terminal output attached.
On an aside, this game, along with others by Positech show nothing for me,
graphically, unless I edit the CONFIG.MUF file in the game's data directory,
and set IsWindowed to 1 - that might be useful for anyone looking into this, as
well.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=15784
Summary: Grim Fandango: altered colors
Product: Wine
Version: 1.1.7
Platform: PC
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: t0p0linik(a)yahoo.it
Created an attachment (id=16896)
--> (http://bugs.winehq.org/attachment.cgi?id=16896)
In 16 bpp the background fades to dark green
The game runs very slow and Manny doesn't move smooth, both when i set 3D accel
and when i set software rendering.
Furthermore, background colors get altered in a few seconds: when X is at 16
bpp the background fades to dark green, when X is in 24 bpp mode the background
gets saturated. Note that there is a rectangle around Manny which is at normal
colors (maybe is it redrawn more often than the other parts of the window?).
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=25241
Summary: Steam: Source based games will not start
Product: Wine
Version: 1.3.6
Platform: x86-64
OS/Version: Linux
Status: UNCONFIRMED
Severity: blocker
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: arho.iivari(a)elisanet.fi
Source based games will not start in steam after recent updates to Source
engine.
A popup window will appear with text "Preparing to launch Counter Strike:
Source...". Then the pop-up disappears and the game will not start.
Same happens with all Source based games.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18119
Summary: SmartDraw aborts after displaying trial window
Product: Wine
Version: 1.1.19
Platform: PC
URL: http://www.smartdraw.com/downloads/
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: user32
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: arethusa26(a)gmail.com
Created an attachment (id=20566)
--> (http://bugs.winehq.org/attachment.cgi?id=20566)
SmartDraw output
After applying the patch from bug 18076 onto today's Git
(wine-1.1.19-90-g781b087) or installing native gdiplus, after choosing to
continue using the trial version of SmartDraw 2009, SmartDraw displays a dialog
box with the message:
"Unable to load SmartDraw. Perhaps too many instances are open."
>From the relay log, I noticed that this occurs prior to the message box being
displayed:
0009:Call user32.AppendMenuA(00000f00,00000110,000075cd,03c97a78) ret=0150caa8
0009:Ret user32.AppendMenuA() retval=00000000 ret=0150caa8
I've attached a +menu trace and the normal trace output.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.